npm

4,315 tracked vulnerabilities.

CVE-2013-6393
LibYAML < 0.1.5 - Heap-Based Buffer Overflow via Crafted YAML Tags
Feb 06, 2014
EPSS 0.08
CVE-2013-2022
jPlayer < 2.2.23 - Cross-Site Scripting via jQuery or id Parameters
Aug 17, 2013
EPSS 0.03
CVE-2013-4942
Moodle 2.1.10 2.2.x<2.2.11 2.3.x<2.3.8 2.4.x<2.4.5 2.5.x<2.5.1 - Cross-Site Scripting via Yahoo YUI Flash Uploader
Jul 29, 2013
EPSS 0.01
CVE-2013-4941
Moodle - Cross-Site Scripting via Uploader Component
Jul 29, 2013
EPSS 0.01
CVE-2013-4940
Moodle 2.1.10 2.2.x<2.2.11 2.3.x<2.3.8 2.4.x<2.4.5 2.5.x<2.5.1 - Cross-Site Scripting via Yahoo YUI IO Utility
Jul 29, 2013
EPSS 0.01
CVE-2013-4939
Moodle 2.1.10 2.2.x<2.2.11 2.3.x<2.3.8 2.4.x<2.4.5 2.5.x<2.5.1 - Cross-Site Scripting via IO Utility Component
Jul 29, 2013
EPSS 0.01
CVE-2013-4660
nodeca/js-yaml < 2.0.5 - Remote Code Execution via Unsafe YAML Tag Parsing
Jun 28, 2013
EPSS 0.17
CVE-2012-6708 MEDIUM
jQuery < 1.9.0 - Cross-Site Scripting via jQuery(strInput) Function
Jan 18, 2018
CVSS 6.1
EPSS 0.09
CVE-2012-6662
Redhat Enterprise Linux Desktop < 1.10.0 - XSS
Nov 24, 2014
EPSS 0.06
CVE-2012-5881
YUI 2.4.0-2.9.0 - Cross-Site Scripting via charts.swf
Nov 16, 2012
EPSS 0.02
CVE-2011-4969
jQuery < 1.6.3 - Cross-Site Scripting via location.hash Element Selection
Mar 08, 2013
EPSS 0.19
CVE-2011-1714
qooxdoo 1.3 - Cross-Site Scripting via Callback Parameter
Apr 18, 2011
EPSS 0.03
CVE-2010-5312 MEDIUM
jQuery UI <1.10.0 - XSS
Nov 24, 2014
CVSS 6.1
EPSS 0.18
CVE-2010-2273
Dojo 1.0.x-1.0.2, 1.1.x-1.1.1, 1.2.x-1.2.3, 1.3.x-1.3.2, 1.4.x-1.4.1 - Cross-Site Scripting
Jun 15, 2010
EPSS 0.05
CVE-2008-6681
Dojo < 1.1 - Cross-Site Scripting via XML Entities in TEXTAREA Element
Apr 09, 2009
EPSS 0.01
Products
openclaw 433 n8n 110 parse-server 98 flowise 67 directus 55 nocodb 54 electron 49 next 47 vm2 41 hono 38 axios 33 undici 30 pnpm 25 ghost 22 vite 21 astro 19 tar 19 tinymce 18 protobufjs 16 ckeditor4 15 fuxa-server 15 jspdf 15 joplin 14 liquidjs 14 nodebb 14 sequelize 14 angular 13 flowise-components 13 react-router 13 signalk-server 13
Quick Filters
Critical CVEs With Exploits In CISA KEV